CVE-2025-1379: code-projects Real Estate Property Management System CustomerReport.php sql injection

Published Feb 17, 2025

Updated

A vulnerability has been found in code-projects Real Estate Property Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /Admin/CustomerReport.php. The manipulation of the argument city leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.

Affected Software

2 affected components

Code-projects Real Estate Property Management System

Code-projects Real Estate Property Management System=1.0

Event History

Feb 17, 2025

CVE Published

via MITRE·06:31 AM

Data Sourced

via MITRE·06:31 AM

DescriptionSeverityWeakness

Data Sourced

via NVD·07:15 AM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2025-1379?

CVE-2025-1379 is classified as a critical vulnerability.

How does CVE-2025-1379 affect the Real Estate Property Management System?

CVE-2025-1379 allows for SQL injection through manipulation of the 'city' argument in the /Admin/CustomerReport.php file.

What versions of Real Estate Property Management System are impacted by CVE-2025-1379?

CVE-2025-1379 affects Real Estate Property Management System version 1.0.

How can I protect my system from CVE-2025-1379?

To protect against CVE-2025-1379, it is recommended to sanitize user inputs and use prepared statements for database queries.

Is there a patch available for CVE-2025-1379?

As of now, there are no specific patches released for CVE-2025-1379, so immediate action should be taken to mitigate the risk.